5.6Mittel

CVE-2026-15030

ASUS System Control Interface v3; ASUS System Control Interface; ASUS Business Manager Veröffentlicht: (vor 3 Monaten)

Beschreibung

Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation. Refer to the ' Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

Schwachstellentyp (CWE): CWE-125

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
ASUS Business Manager through v3.0.38.0
ASUS System Control Interface before v1.1.40.0
ASUS System Control Interface v3 before v3.1.65.0

Referenzen und Patches